Automated Fake Access Point Attack Detection and Prevention System with IoT Devices

Kilinçer, İlhan Fırat; Ertam, Fatih; Şengür, Abdulkadir

doi:10.17694/bajece.634104

Cited by 9 publications

(6 citation statements)

References 18 publications

Supporting

Mentioning

Contrasting

Order By: Relevance

“…There are many types of MITM attacks that attackers can use to exploit insecure applications and user data. Some of the most common types of MITM attacks include rogue access point attacks [109], address resolution protocol (ARP) spoofing [110], domain name system (DNS) spoofing [111], session hijacking [112], and SSL/TLS interception [113].…”

Section: Man-in-the-middle Attack (Mitm) [108]mentioning

confidence: 99%

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Tariq

Ahmed

Bashir

et al. 2023

Sensors

112

View full text Add to dashboard Cite

The emergence of the Internet of Things (IoT) technology has brought about tremendous possibilities, but at the same time, it has opened up new vulnerabilities and attack vectors that could compromise the confidentiality, integrity, and availability of connected systems. Developing a secure IoT ecosystem is a daunting challenge that requires a systematic and holistic approach to identify and mitigate potential security threats. Cybersecurity research considerations play a critical role in this regard, as they provide the foundation for designing and implementing security measures that can address emerging risks. To achieve a secure IoT ecosystem, scientists and engineers must first define rigorous security specifications that serve as the foundation for developing secure devices, chipsets, and networks. Developing such specifications requires an interdisciplinary approach that involves multiple stakeholders, including cybersecurity experts, network architects, system designers, and domain experts. The primary challenge in IoT security is ensuring the system can defend against both known and unknown attacks. To date, the IoT research community has identified several key security concerns related to the architecture of IoT systems. These concerns include issues related to connectivity, communication, and management protocols. This research paper provides an all-inclusive and lucid review of the current state of anomalies and security concepts related to the IoT. We classify and analyze prevalent security distresses regarding IoT’s layered architecture, including connectivity, communication, and management protocols. We establish the foundation of IoT security by examining the current attacks, threats, and cutting-edge solutions. Furthermore, we set security goals that will serve as the benchmark for assessing whether a solution satisfies the specific IoT use cases.

show abstract

Section: Man-in-the-middle Attack (Mitm) [108]mentioning

confidence: 99%

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Tariq

Ahmed

Bashir

et al. 2023

Sensors

112

View full text Add to dashboard Cite

show abstract

“…This is done by making a broadcast similar to the SSID (Service Set Identifier) by the attacker. Then, the attacker allows the users to communicate with this SSID [19]. Our proposed protocol has immunity against this type of attack because it satisfies mutual authentication between the two shared parties (U and AP) as mentioned before.…”

Section: ) Fake Access Point Attackmentioning

confidence: 95%

Untraceable Authentication Protocol for IEEE802.11s Standard

Abouhogail

2021

Int. j. commun. netw. inf. secur.

View full text Add to dashboard Cite

In the current paper, a new handover authentication protocol for IEEE802.11s Wireless mesh networks is presented. The new protocol divides the network into a number of cells, each cell contains a number of access points and based on the concept of ticket authentication, the mesh user takes a new ticket when enters the region of a new cell which decreases the handover latency. Moreover, in the current paper, a new idea for ticket generation is proposed, called Chain Ticket Derivation Function (CTDF), which uses the concept of a chain. Using CTDF in our proposed protocol raises the level of privacy for the users. The security analysis presented in the paper showed more strengths in our proposed scheme. Two formal verification tools, AVISPA and BAN logic are used to test the proposed protocol.

show abstract

“…In [13] the authors propose an IoT-based method to detect and prevent fake access point attacks in Wi-Fi networks. Utilizing a single board computer and a wireless antenna with a "Soft AP" feature, they conducted air scans to identify and mitigate fake AP broadcasts.…”

Section: Wi-fi Attack Detection Toolsmentioning

confidence: 99%

Automated Wi-Fi intrusion detection tool on 802.11 networks

Dimitris Koutras,

Panos Dimitrellos,

Panayiotis Kotzanikolaou

et al. 2024

ITU J-FET

View full text Add to dashboard Cite

Wi-Fi networks enable user-friendly network connectivity in various environments, ranging from home to enterprise networks. However, vulnerabilities in Wi-Fi implementations may allow nearby adversaries to gain an initial foothold into a network, e.g., in order to attempt further network penetration. In this paper we propose a methodology for the detection of attacks originating from Wi-Fi networks, along with a Wi-Fi Network Intrusion Detection (Wi-Fi-NID) tool, developed to automate the detection of such attacks at 802.11 networks. In particular, Wi-Fi-NID has the ability to detect and trace possible illegal network scanning attacks, which originate from attacks at the Wi-Fi access layer. We extend our initial implementation to increase the efficiency of detection, based on mathematical and statistical function techniques. A penetration testing methodology is defined, in order to discover the environmental security characteristics, related with the current configuration of the devices connected to the 802.11 network. The methodology covers known Wi-Fi attacks such as de-authentication attacks, capturing and cracking WPA-WPA/2 handshake, captive portal and WPA attacks, mostly based on various open source software tools, custom tools, as well as on specialized hardware.

show abstract

Automated Fake Access Point Attack Detection and Prevention System with IoT Devices

Cited by 9 publications

References 18 publications

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

A Critical Cybersecurity Analysis and Future Research Directions for the Internet of Things: A Comprehensive Review

Untraceable Authentication Protocol for IEEE802.11s Standard

Automated Wi-Fi intrusion detection tool on 802.11 networks

Contact Info

Product

Resources

About